WHAT IS CLAIMED IS: 



1 . A method for distributing information which includes a signature, 
the method comprising steps of: 

generating the signature over first information and second information; 
sending the first information over a network; 

sending the second information over the network separately from the step 
of sending the first information; and 

sending the signature over the network separately from at least one of the 
first information and the second information. 

2. The method for distributing information of claim 1, wherein the 
first information comprises an authorization data structure and the second information 
comprises a software object. 

3. The method for distributing information of claim 1, further 
comprising a step of appending the signature to the first information. 

4. The method for distributing information of claim I, determining 
which resources a software object in the second information is entitled to interact with. 

5. The method for distributing information of claim 1, wherein the 
step of sending second information comprises a step of waiting a predetermined time 
period after the step of sending the first information before sending the second 
information. 

6. The method for distributing information of claim 1, wherein the 
first information includes authorization information for an associated software object. 

7. The method for distributing information of claim 1, wherein: 
the step of sending the first information comprises transmitting the first 

information over a first transmission pathway, 

the step of sending the second information comprises transmitting the . 
second information over a second transmission pathway different from the first 
transmission pathway, and 
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7 the step of sending the signature comprises transmitting the signature over 

8 a third transmission pathway different from at least one of the first and second 

9 transmission pathways. 

1 8. A method for detecting modification of information, the method 

2 comprising steps of: 

3 receiving first information from a network; 

4 receiving second information from the network separately from the step of 

5 receiving the first information; 

6 receiving a signature separately from the network from at least one of the 

7 first and second information; and 

8 authenticating the signature over the first and second information. 

1 9. The method for detecting modification of information of claim 8, 

2 wherein the first information comprises an authorization data structure and the second 

3 information comprises a software object. 

1 10. The method for detecting modification of information of claim 8, 

2 wherein: 

3 the step of receiving first information comprises receiving the first 

4 information from a first transmission pathway, 

5 the step of receiving second information comprises receiving the second 

6 information from a second transmission pathway different from the first transmission 

7 pathway, and 

8 the step of receiving a signature comprises receiving the signature from a 

9 third transmission pathway different from at least one of the first and second transmission 

10 pathways. 

1 11. The method for detecting modification of information of claim 8, 

2 further comprising a steps of: 

3 correlating the first information to the second information; and 

4 correlating the signature to the first information and second information. 

1 12. The method for detecting modification of information of claim 8, 

2 further comprising a step of determining a lifetime for which the second information is 

3 usable. 
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1 13. The method for detecting modification of information of claim 8, 

2 further comprising a step of checking the first information for an authorization 

3 corresponding to the second information. 

1 14. A conditional access system for detecting modification of 

2 information, comprising: 

3 an information object; 

4 authorization information, wherein a signature is generated over the 

5 information object and the authorization information. 

1 15. The conditional access system of claim 14, further comprising an 

2 authorization message which includes the authorization information and the signature. 

1 16. The conditional access system of claim 15, wherein the 

2 authorization message includes a plurality of signatures. 

1 17. The conditional access system of claim 16, wherein each of the 

2 plurality of signatures uses a different signing algorithm. 

1 18. The conditional access system 'of claim 14, wherein the 

2 authorization information includes authorization tiers which pre-authorize a plurality of 

3 information objects. 

1 19. The conditional access system of claim 14, wherein the information 

2 object is sent separately over a network from the authorization information. 

1 20. The conditional access system of claim 14, wherein: 

2 the information object uses a first transmission pathway to a set top box, 

3 the authorization information uses a second transmission pathway to the 

4 set top box that is different from the first transmission pathway, and 

5 the signature uses a third transmission pathway to the set top box that is 

6 different from at least one of the first and second transmission pathways. 
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